Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json)
Hash identifier: ugKnRgCcH+vrcsamxrgYgzuDgQRIlsbgdq1K/HWoQl0=
Subject key identifier: 98:15:A4:BA:23:8E:D0:25:C7:E5:63:18:2E:F2:B8:EE:11:1C:D2:EA
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 019896A5B797C84A6DBB5708FEA45018A05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
Manifest number: 1023
Signing time: Mon 11 Aug 2025 01:01:39 +0000
Manifest this update: Mon 11 Aug 2025 01:01:39 +0000
Manifest next update: Tue 12 Aug 2025 01:01:39 +0000
Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: PJ+0G7E776tZURt+h1UBN0UTn+BVStgz1xRoCEgaA5I=)
2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:b7:97:c8:4a:6d:bb:57:08:fe:a4:50:18:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Aug 11 01:01:39 2025 GMT
Not After : Aug 12 01:01:39 2025 GMT
Subject: CN=9815a4ba238ed025c7e563182ef2b8ee111cd2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:c7:fc:31:5b:47:34:de:ce:f4:e6:f6:f9:
1f:b7:2f:ff:b2:11:89:fc:5b:c3:ef:34:71:5a:8d:
bd:a8:b5:30:b8:bb:f2:31:a7:26:e9:49:32:41:60:
37:c3:87:95:4a:d0:c6:00:20:dd:ee:f7:dd:26:77:
94:f1:8e:49:a9:24:e3:94:36:79:7f:0d:0c:99:57:
bc:65:a2:a7:85:d1:8e:ee:70:85:fc:e5:54:0c:21:
e4:dc:62:26:fe:fd:07:3f:63:b7:e9:93:7a:a1:ca:
96:a2:e6:ef:fa:4f:bf:7a:59:64:1f:8a:a7:4e:1d:
79:3f:aa:c0:99:3a:58:74:00:ae:4e:32:09:94:5e:
60:ae:ab:63:38:9c:24:a9:73:95:6a:da:ed:14:4b:
e7:05:a9:7b:a3:07:88:a3:a0:35:c9:62:d8:59:7c:
c3:4b:39:19:7b:9a:79:8d:e1:64:e9:1a:93:ce:a3:
51:31:4d:f7:64:e0:fc:f8:a7:dd:9c:9c:dd:27:c0:
c1:cf:b8:fd:0a:78:d6:27:3b:96:8a:f8:b5:c4:49:
b6:79:df:4a:cf:54:11:28:c4:91:ce:3f:83:9f:f0:
aa:86:92:ec:0f:0a:d4:41:e4:9f:df:ea:e0:8d:7e:
4a:fd:5f:22:da:11:b1:2d:6f:fb:2e:f3:a0:21:71:
98:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:A4:BA:23:8E:D0:25:C7:E5:63:18:2E:F2:B8:EE:11:1C:D2:EA
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1a:24:a6:16:7f:7e:3c:50:fb:cb:ae:74:c8:25:b4:2f:ac:
f8:53:95:72:49:c2:ab:58:04:7a:ff:98:6a:6d:9f:6f:d1:f7:
f0:29:3e:fe:5f:f8:0a:f6:5b:eb:a7:2a:77:f8:2d:1e:f4:c7:
0d:54:44:6a:8c:38:ae:4c:49:1b:99:78:07:fd:93:c4:b6:00:
9b:10:16:4d:f0:74:35:d2:4f:43:cc:9c:0c:4a:bc:43:28:e9:
22:b5:b6:5f:17:13:17:a3:11:ff:0c:20:6a:14:bd:3b:19:dc:
2a:de:f3:b2:85:b0:be:e8:52:91:77:b9:94:e5:df:7c:1d:1c:
fb:30:fe:da:4e:78:e0:ad:7b:ce:89:c3:36:72:46:19:bd:35:
0f:66:dd:75:bf:81:27:5f:12:75:73:df:43:84:15:6e:80:a0:
8c:3b:5f:f5:d0:ec:5d:7e:ff:fd:c8:3d:96:83:9e:38:e1:8f:
36:a5:b8:c7:71:93:36:4e:c1:e2:65:a9:07:08:e6:c8:b4:b1:
7f:c7:05:4b:c0:a6:49:2d:9b:4f:ca:49:af:73:13:51:21:cc:
a6:0f:29:da:7d:02:ac:89:d9:e0:64:87:44:a2:7d:f1:ef:28:
c7:34:e1:5d:55:ab:f9:7f:de:00:9f:1a:94:bf:87:8d:e4:af:
ec:48:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:13 2025 by rpki-client